Big new addition today, you can now purchase ranks with Rickies. You can also gift ranks to other users.

By default users cannot receive a rank via a gift unless they specifically go in to their gift options and enable it. This is so that it cannot be used for griefing. There may be bugs with this new feature as it is a lot more complicated than just giving items to a player. We do not yet block you from demoting yourself or others. So this means if you're an Architect you will be able to buy the Member rank and demote yourself. I will be blocking the ability to demote tomorrow, but for now be careful.

This feature is logged in three places. Your purchase log, your player log (Inside the ACP) and the Admin log of the ACP. This means staff can view what rank you purchased and for whom. This will enable us to reverse any mistakes and due to the high price of rank purchasing we will be allowing you to request refunds within 72 hours of a rank purchase.

All of the spawner icons have been changed to make it a little clearer which spawner contains which mob. I've also added Horses, Donkeys and Mules to the shop with coming soon icons. You obviously cannot buy these until 1.6 releases. I've added them and the back-end code to support them so when 1.6 launches we can have them available as soon as possible.

A new big feature has been added to the abilities section of the shop. You can now purchase a 54 Slot backpack. This lasts forever so it's a buy once, keep forever thing. It costs 500 Rickies. This is how it works:

1. To access your backpack after purchase type /backpack it will open as if you were looking in to a chest.
2. It will automatically fill if your main inventory becomes full.
3. Your backpack does not lose your items after you die, anything you put in there is safe.
4. The storage for the backpack is server-side in a flat-file database so in the event that the plugin which enables this functionality stops being updated we can retrieve any of the items you've stored in your backpack for you.

The backpack takes the place of the invisibility potion on the shop which frankly was useless and only causing problems. Brewing is now firmly in player hands.

The shop received an under-the-hood update today. Security. The shop now issues you with a security token to make sure that when you make a purchase on the shop you're actually doing it on our shop and not through a specially crafted attack page. This is known as a CRSF or Cross-site request forgery attack.

This was a vulnerability I knew about when I first started writing the shop but it was brought to my attention again by Vusys and I decided to actually implement a fix before someone exploited it as an obvious flaw and if Vusys could identify that then someone else could too. I'd like to thank him again for disclosing the vulnerability privately in a secure manner. This was the 3rd vulnerability of the three he disclosed to me several days ago, all three are now fixed.